• Intercepting Traffic for Mobile Applications that Bypass the System Proxy
• How to Root Android Phones
• Communicating Security to the C-Suite: A Strategic Approach 
• Offline Memory Forensics With Volatility
• Getting Started with AI Hacking: Part 1
• Go-Spoof: A Tool for Cyber Deception
• How to Test Adversary-in-the-Middle Without Hacking Tools
• Canary in the Code: Alert()-ing on XSS Exploits
• How to Hack Wi-Fi with No Wi-Fi
• Why Your Org Needs a Penetration Test Program

• Throwback Thursday | I Got an Alert, Now What?
• Throwback Thursday | Why Developers Hate Infosec
• Throwback Thursday | Exploiting Persistent XSS
• Throwback Thursday | Hackers in the Boardroom
• Throwback Thursday | Tool Demo – Riverside
• Throwback Thursday | The Fools Gold Rush to Compliance
• Throwback Thursday | Is the PKI Sky Falling?
• Throwback Thursday | What’s Old is Gold
• Throwback Thursday | Wireless Attack Killchain for N00bs
• Throwback Thursday | Six Things No One !@#$%^& Told Me About Pentesting

• Wshlient - A Simple Tool To Interact With Web Shells And Command Injection Vulnerabilities
• Pulsegram - Integrated Keylogger With Telegram
• Scrapling - An Undetectable, Powerful, Flexible, High-Performance Python Library That Makes Web Scraping Simple And Easy Again!
• VulnKnox - A Go-based Wrapper For The KNOXSS API To Automate XSS Vulnerability Testing
• Camtruder - Advanced RTSP Camera Discovery and Vulnerability Assessment Tool
• Frogy2.0 - An Automated External Reconnaissance And Attack Surface Management (ASM) Toolkit
• PEGASUS-NEO - A Comprehensive Penetration Testing Framework Designed For Security Professionals And Ethical Hackers. It Combines Multiple Security Tools And Custom Modules For Reconnaissance, Exploitation, Wireless Attacks, Web Hacking, And More
• Text4Shell-Exploit - A Custom Python-based Proof-Of-Concept (PoC) Exploit Targeting Text4Shell (CVE-2022-42889), A Critical Remote Code Execution Vulnerability In Apache Commons Text Versions < 1.10
• Ghost-Route - Ghost Route Detects If A Next JS Site Is Vulnerable To The Corrupt Middleware Bypass Bug (CVE-2025-29927)
• Bytesrevealer - Online Reverse Enginerring Viewer
• CentralizedFirewall - Provides A Firewall Manager API Designed To Centralize And Streamline The Management Of Firewall Configurations
• Maryam - Open-source Intelligence(OSINT) Framework
• TruffleHog Explorer - A User-Friendly Web-Based Tool To Visualize And Analyze Data Extracted Using TruffleHog
• PANO - Advanced OSINT Investigation Platform Combining Graph Visualization, Timeline Analysis, And AI Assistance To Uncover Hidden Connections In Data
• Wappalyzer-Next - Python library that uses Wappalyzer extension (and its fingerprints) to detect technologies
• Telegram-Checker - A Python Tool For Checking Telegram Accounts Via Phone Numbers Or Usernames
• Torward - An Improved Version Based On The Torghost-Gn And Darktor Scripts, Designed To Enhance Anonymity On The Internet
• Instagram-Brute-Force-2024 - Instagram Brute Force 2024 Compatible With Python 3.13 / X64 Bit / Only Chrome Browser
• QuickResponseC2 - A Command & Control Server That Leverages QR Codes To Send Commands And Receive Results From Remote Systems
• Telegram-Scraper - A Powerful Python Script That Allows You To Scrape Messages And Media From Telegram Channels Using The Telethon Library
• Moukthar - Android Remote Administration Tool
• Lobo Guará - Cyber Threat Intelligence Platform
• Telegram-Story-Scraper - A Python Script That Allows You To Automatically Scrape And Download Stories From Your Telegram Friends
• gitGRAB - This Tool Is Designed To Interact With The GitHub API And Retrieve Specific User Details, Repository Information, And Commit Emails For A Given User
• Snoop - OSINT Tool For Research Social Media Accounts By Username

• Google Dork: #red-team #red-teaming
• #red-teaming
• #red-team
• #redteaming
• #redteam
• #pentest
• #pentesting
• #bug-bounty
• #bugbounty

• #pentest, #networkpetnest, #netpentest
• #redteam
• #blueteam
• #appsec
• #bugbountytips